WGU D430 FUNDAMENTALS OF
INFORMATION SECURITY EXAM
QUESTIONS AND ANSWERS
Define9bthe9bconfidentiality9bin9bthe9bCIA9btriad.9b-9bANSWERS--
Our9bability9bto9bprotect9bdata9bfrom9bthose9bwho9bare9bnot9bauthorized9bto9bview9bit.
Examples9bof9bconfidentiality9b-9bANSWERS--
A9bpatron9busing9ban9bATM9bcard9bwants9bto9bkeep9btheir9bPIN9bnumber9bconfidential.9b
An9bATM9bowner9bwants9bto9bkeep9bbank9baccount9bnumbers9bconfidential.
How9bcan9bconfidentiality9bbe9bbroken?9b-9bANSWERS--Losing9ba9blaptop
An9battacker9bgets9baccess9bto9binfo
A9bperson9bcan9blook9bover9byour9bshoulder
Define9bintegrity9bin9bthe9bCIA9btriad.9b-9bANSWERS--
The9bability9bto9bprevent9bpeople9bfrom9bchanging9byour9bdata9band9bthe9bability9bto9brever
se9bunwanted9bchanges.
How9bdo9byou9bcontrol9bintegrity?9b-9bANSWERS--
Permissions9brestrict9bwhat9busers9bcan9bdo9b(read,9bwrite,9betc.)
Examples9bof9bintegrity9b-9bANSWERS--
Data9bused9bby9ba9bdoctor9bto9bmake9bmedical9bdecisions9bneeds9bto9bbe9bcorrect9bor9bthe
9bpatient9bcan9bdie.
Define9bthe9bavailability9bin9bthe9bCIA9btriad.9b-9bANSWERS--
Our9bdata9bneeds9bto9bbe9baccessible9bwhen9bwe9bneed9bit.
How9bcan9bavailability9bbe9bbroken?9b-9bANSWERS--
Loss9bof9bpower,9bapplication9bproblems.9bIf9bcaused9bby9ban9battacker,9bthis9bis9ba9bDenia
l9bof9bService9battack.
Define9binformation9bsecurity.9b-9bANSWERS--
The9bprotection9bof9binformation9band9binformation9bsystems9bfrom9bunauthorized9bacces
s,9buse,9bdisclosure,9bdisruption,9bmodification,9bor9bdestruction9bin9border9bto9bprovide9bc
onfidentiality,9bintegrity,9band9bavailability.
Define9bthe9bParkerian9bHexad9band9bits9bprinciples.9b-9bANSWERS--
The9bParkerian9bHexad9bincludes9bconfidentiality,9bintegrity,9band9bavailability9bfrom9bthe
9bCIA9btriad.9bIt9balso9bincludes9bpossession9b(or9bcontrol),9bauthenticity,9band9butility.
Authenticity9b-9bANSWERS--
Whether9bthe9bdata9bin9bquestion9bcomes9bfrom9bwho9bor9bwhere9bit9bsays9bit9bcomes9bfro
m9b(i.e.9bdid9bthis9bperson9bactually9bsend9bthis9bemail?)
, Confidentiality9bis9baffected9bby9bwhat9btype9bof9battack?9b-9bANSWERS--
Interception9b(eaves9bdropping)
Integrity9bis9baffected9bby9bwhat9btype9bof9battacks?9b-9bANSWERS--
Interruption9b(assets9bare9bunusable),9bmodification9b(tampering9bwith9ban9basset),9bfabri
cation9b(generating9bfalse9bdata)
Authenticity9bis9baffected9bby9bwhat9btype9bof9battacks?9b-9bANSWERS--
Interruption9b(assets9bare9bunusable),9bmodification9b(tampering9bwith9ban9basset),9bfabri
cation9b(generating9bfalse9bdata)
Utility9b-9bANSWERS--
How9buseful9bthe9bdata9bis9bto9byou9b(can9bbe9ba9bspectrum,9bnot9bjust9byes9bor9bno)
Possession9b-9bANSWERS--Do9byou9bphysically9bhave9bthe9bdata9bin9bquestion?
9bUsed9bto9bdescribe9bthe9bscope9bof9ba9bloss
Identify9bthe9bfour9btypes9bof9battacks9b-9bANSWERS--
interception,9binterruption,9bmodification,9band9bfabrication
Interception9battacks9b-9bANSWERS--Make9byour9bassets9bunusable9bor9bunavailable
Interruption9battacks9b-9bANSWERS--
cause9bassets9bto9bbecome9bunusable9bor9bunavailable9bfor9bour9buse,9bon9ba9btemporary9
bor9bpermanent9bbasis
Modification9battacks9b-9bANSWERS--Tampering9bwith9ban9basset
Fabrication9battacks9b-9bANSWERS--
Generating9bdata,9bprocess,9band9bcommunications
Define9bthe9brisk9bmanagement9bprocess9b-9bANSWERS--1.9bIdentify9bassets
2.9bIdentify9bthreats
3.9bAssess9bvulnerabilities
4.9bAssess9brisks
5.9bMitigate9brisks
Define9bthe9bincident9bresponse9bprocess9band9bits9bstages.9b-9bANSWERS--Preparation
Detection9band9banalysis
Containment
Eradication
Recovery
Preparation9bin9bincident9bresponse9b-9bANSWERS--creating9bpolicies9band9bprocedures
Detection9bin9bincident9bresponse9b-9bANSWERS--
Using9btools9band9bhumans9bto9bdecide9bif9ban9bincident9bis9ban9bincident
Defense9bin9bDepth9b-9bANSWERS--
employing9bmultiple9blayers9bof9bcontrols9bto9bavoid9ba9bsingle9bpoint9bof9bfailure
INFORMATION SECURITY EXAM
QUESTIONS AND ANSWERS
Define9bthe9bconfidentiality9bin9bthe9bCIA9btriad.9b-9bANSWERS--
Our9bability9bto9bprotect9bdata9bfrom9bthose9bwho9bare9bnot9bauthorized9bto9bview9bit.
Examples9bof9bconfidentiality9b-9bANSWERS--
A9bpatron9busing9ban9bATM9bcard9bwants9bto9bkeep9btheir9bPIN9bnumber9bconfidential.9b
An9bATM9bowner9bwants9bto9bkeep9bbank9baccount9bnumbers9bconfidential.
How9bcan9bconfidentiality9bbe9bbroken?9b-9bANSWERS--Losing9ba9blaptop
An9battacker9bgets9baccess9bto9binfo
A9bperson9bcan9blook9bover9byour9bshoulder
Define9bintegrity9bin9bthe9bCIA9btriad.9b-9bANSWERS--
The9bability9bto9bprevent9bpeople9bfrom9bchanging9byour9bdata9band9bthe9bability9bto9brever
se9bunwanted9bchanges.
How9bdo9byou9bcontrol9bintegrity?9b-9bANSWERS--
Permissions9brestrict9bwhat9busers9bcan9bdo9b(read,9bwrite,9betc.)
Examples9bof9bintegrity9b-9bANSWERS--
Data9bused9bby9ba9bdoctor9bto9bmake9bmedical9bdecisions9bneeds9bto9bbe9bcorrect9bor9bthe
9bpatient9bcan9bdie.
Define9bthe9bavailability9bin9bthe9bCIA9btriad.9b-9bANSWERS--
Our9bdata9bneeds9bto9bbe9baccessible9bwhen9bwe9bneed9bit.
How9bcan9bavailability9bbe9bbroken?9b-9bANSWERS--
Loss9bof9bpower,9bapplication9bproblems.9bIf9bcaused9bby9ban9battacker,9bthis9bis9ba9bDenia
l9bof9bService9battack.
Define9binformation9bsecurity.9b-9bANSWERS--
The9bprotection9bof9binformation9band9binformation9bsystems9bfrom9bunauthorized9bacces
s,9buse,9bdisclosure,9bdisruption,9bmodification,9bor9bdestruction9bin9border9bto9bprovide9bc
onfidentiality,9bintegrity,9band9bavailability.
Define9bthe9bParkerian9bHexad9band9bits9bprinciples.9b-9bANSWERS--
The9bParkerian9bHexad9bincludes9bconfidentiality,9bintegrity,9band9bavailability9bfrom9bthe
9bCIA9btriad.9bIt9balso9bincludes9bpossession9b(or9bcontrol),9bauthenticity,9band9butility.
Authenticity9b-9bANSWERS--
Whether9bthe9bdata9bin9bquestion9bcomes9bfrom9bwho9bor9bwhere9bit9bsays9bit9bcomes9bfro
m9b(i.e.9bdid9bthis9bperson9bactually9bsend9bthis9bemail?)
, Confidentiality9bis9baffected9bby9bwhat9btype9bof9battack?9b-9bANSWERS--
Interception9b(eaves9bdropping)
Integrity9bis9baffected9bby9bwhat9btype9bof9battacks?9b-9bANSWERS--
Interruption9b(assets9bare9bunusable),9bmodification9b(tampering9bwith9ban9basset),9bfabri
cation9b(generating9bfalse9bdata)
Authenticity9bis9baffected9bby9bwhat9btype9bof9battacks?9b-9bANSWERS--
Interruption9b(assets9bare9bunusable),9bmodification9b(tampering9bwith9ban9basset),9bfabri
cation9b(generating9bfalse9bdata)
Utility9b-9bANSWERS--
How9buseful9bthe9bdata9bis9bto9byou9b(can9bbe9ba9bspectrum,9bnot9bjust9byes9bor9bno)
Possession9b-9bANSWERS--Do9byou9bphysically9bhave9bthe9bdata9bin9bquestion?
9bUsed9bto9bdescribe9bthe9bscope9bof9ba9bloss
Identify9bthe9bfour9btypes9bof9battacks9b-9bANSWERS--
interception,9binterruption,9bmodification,9band9bfabrication
Interception9battacks9b-9bANSWERS--Make9byour9bassets9bunusable9bor9bunavailable
Interruption9battacks9b-9bANSWERS--
cause9bassets9bto9bbecome9bunusable9bor9bunavailable9bfor9bour9buse,9bon9ba9btemporary9
bor9bpermanent9bbasis
Modification9battacks9b-9bANSWERS--Tampering9bwith9ban9basset
Fabrication9battacks9b-9bANSWERS--
Generating9bdata,9bprocess,9band9bcommunications
Define9bthe9brisk9bmanagement9bprocess9b-9bANSWERS--1.9bIdentify9bassets
2.9bIdentify9bthreats
3.9bAssess9bvulnerabilities
4.9bAssess9brisks
5.9bMitigate9brisks
Define9bthe9bincident9bresponse9bprocess9band9bits9bstages.9b-9bANSWERS--Preparation
Detection9band9banalysis
Containment
Eradication
Recovery
Preparation9bin9bincident9bresponse9b-9bANSWERS--creating9bpolicies9band9bprocedures
Detection9bin9bincident9bresponse9b-9bANSWERS--
Using9btools9band9bhumans9bto9bdecide9bif9ban9bincident9bis9ban9bincident
Defense9bin9bDepth9b-9bANSWERS--
employing9bmultiple9blayers9bof9bcontrols9bto9bavoid9ba9bsingle9bpoint9bof9bfailure